Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
File: 6azP0hq9f-P6DWuzHfSCC_taQYg.mft (raw, json)
Hash identifier: 4ZITbEFIwXmQbDCbxavSvD6J4GGBBlzAUGQLQj1sbzk=
Subject key identifier: DB:96:04:9B:7D:74:E3:1C:24:94:BA:C2:2C:8E:5D:F7:37:ED:53:C7
Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Certificate serial: 01985AC74BD6561FA5A55AB855BBA2474554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
Manifest number: 08C7
Signing time: Wed 30 Jul 2025 10:01:06 +0000
Manifest this update: Wed 30 Jul 2025 10:01:06 +0000
Manifest next update: Thu 31 Jul 2025 10:01:06 +0000
Files and hashes: 1: 6azP0hq9f-P6DWuzHfSCC_taQYg.crl (hash: KO8K/K2YDeSoC6ivULpmm/nU3MEo+eLFCAtFycCuF3g=)
2: _MxMNpyNBthjBmfib_9uhPuqPf0.roa (hash: EolAt4dLQVvdwjyApcTjs0rowC2XcqD4wINaXLiU8UM=)
3: qtuqIB5CtIi31UAhEs4p3pi5c2Y.roa (hash: /hLyLmNfmw61h29Ovfaz4hXm3fgjqU+pple47V8gAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:c7:4b:d6:56:1f:a5:a5:5a:b8:55:bb:a2:47:45:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Validity
Not Before: Jul 30 10:01:06 2025 GMT
Not After : Jul 31 10:01:06 2025 GMT
Subject: CN=db96049b7d74e31c2494bac22c8e5df737ed53c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:a4:dc:e3:56:3b:96:41:db:c3:b2:90:e2:
c2:9e:ff:07:2c:42:96:f1:ff:97:48:93:95:a8:92:
52:d3:90:5e:e0:84:83:ca:d1:99:fe:77:86:1e:09:
30:65:cf:69:0d:cf:3c:87:b0:e5:f0:b8:85:e5:2c:
f8:41:eb:7c:1c:69:dd:f2:fb:6a:80:2e:3d:ef:01:
d1:3f:fd:41:06:cf:69:13:10:b5:9e:03:bf:66:e7:
97:99:b2:53:72:e3:fc:cb:9c:7e:45:1f:3a:aa:d8:
56:7f:98:50:f8:14:43:cb:dd:48:99:1e:ff:ef:c4:
00:26:8a:67:69:17:a8:14:7d:bc:99:73:e7:4c:58:
d6:81:7a:07:e2:41:af:f4:b1:e9:86:b0:c7:8e:30:
f6:c7:51:32:47:74:9f:a6:b7:c9:14:18:7b:e6:92:
cb:f2:a7:36:6d:f1:7c:55:f3:15:dc:b0:67:3d:57:
d1:f3:3f:d1:8c:a6:01:84:9d:ff:20:46:e6:08:12:
16:56:b2:bb:45:b4:eb:58:c4:78:dc:3d:15:88:85:
73:17:6e:8c:56:cc:06:f5:b9:8b:30:3f:04:ef:ac:
09:6b:3e:d9:6f:bf:9d:3c:b2:91:b0:c6:eb:ed:dc:
e2:9a:e2:6b:a5:c7:d9:d5:da:ab:30:ac:ea:ec:ca:
3c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:96:04:9B:7D:74:E3:1C:24:94:BA:C2:2C:8E:5D:F7:37:ED:53:C7
X509v3 Authority Key Identifier:
keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9b:c1:f8:0a:37:47:bd:e7:5f:b6:f6:12:34:cc:fc:7e:fd:
63:81:23:9a:d2:f5:14:0d:36:d6:af:c3:52:45:c7:14:4b:0e:
e0:de:5f:88:a4:7a:66:0b:a2:b2:d9:68:a6:15:e3:38:57:18:
93:e1:a2:12:1a:80:a6:85:1b:4c:a1:be:ae:81:61:e2:c6:b7:
e7:a7:fb:0a:ba:de:8f:47:99:ab:b6:66:e4:6f:e8:cc:b2:71:
b3:56:63:10:1e:17:e9:bd:7d:7d:d8:8b:e6:d9:ef:47:e5:01:
3c:08:0e:5c:26:3c:2b:f5:94:4f:32:1b:f3:a4:fb:f8:89:3c:
91:08:65:38:dd:c9:84:cb:11:1a:36:18:a3:3a:5c:f4:a3:85:
05:13:d9:d7:e8:82:a5:2a:b9:34:97:f7:62:5e:08:fd:7e:46:
7d:33:70:c9:5c:5a:e8:db:7b:a0:a4:4c:b5:34:98:88:bc:21:
2e:7a:d2:04:3b:f4:af:9a:1e:0e:db:39:45:0c:a1:26:23:b1:
32:e0:fd:d9:3f:bd:87:07:bc:e8:6e:89:64:dd:5e:e4:66:42:
33:6c:13:6a:4b:bf:48:3f:d6:bd:66:34:7b:b0:85:3a:f3:b6:
6c:d8:6b:4a:95:b0:e1:13:26:3e:e4:9c:3a:8d:73:2d:1c:86:
1c:ae:9d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 16:43:03 2025 by rpki-client